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The MAILING DATE of this communication appears on the cover sheet with the correspondence address » 
Period for Reply 

A SHORTENED STATUTORY PERIOD FOR REPLY IS SET TO EXPIRE 3 MONTH(S) FROM 
THE MAILING DATE OF THIS COMMUNICATION. 

- Extensions of time may be available under the provisions of 37 CFR 1.136(a). In no event, however, may a reply be timely filed 
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earned patent term adjustment. See 37 CFR 1.704(b). 
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2a)Q This action is FINAL. 2b)l3 This action is non-final. 
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DETAILED ACTION 
Claim Rejections - 35 USC §112 

1 . The following is a quotation of the second paragraph of 35 U.S.C. 112: 

The specification shall conclude with one or more claims particularly pointing out and distinctly 
claiming the subject matter which the applicant regards as his invention. 

2. The term "at least in part" in claims 1 and 10, is a relative term which 
renders the claim indefinite. The term "at least in part " is not defined by the 
claim, the specification does not provide a standard for ascertaining the requisite 
degree, and one of ordinary skill in the art would not be reasonably apprised of 
the scope of the invention. Applicant needs to clarify whether the method is 
preventing the hacker from performing activities or not. 

Claim Rejections - 35 USC § 103 

3. The following is a quotation of 35 U.S.C. 103(a) which forms the basis for 
all obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described 
as set forth in section 1 02 of this title, if the differences between the subject matter sought to 
be patented and the prior art are such that the subject matter as a whole would have been 
obvious at the time the invention was made to a person having ordinary skill in the art to which 
said subject matter pertains. Patentability shall not be negatived by the manner in which the 
invention was made. 

4. Claims 1-27 are rejected under 35 U.S.C. 103(a) as being unpatentable 
over Ogawa (U.S. Patent No. 6.754.736 B1) in view of Willman (U.S. Patent 
No. 5.418.956). 

5. Referring to the instant claims, Ogawa discloses an information 
processing apparatus, data inputting/outputting method, and program storage 
medium therefor (see abstract). Ogawa teaches that when a user process 
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issues an input/output request in a process performed in response to the 
input/output request generated by the user process, the input/output request is 
queued in the input/output request list, which is a queue in a list format on the 
user space side. On the kernel side, when a input/output request in the 
input/output request list is processed, the status is changed into "processed", and 
a list element whose status indicates 'processed' is removed from the request 
list on the user space side. 

6. Referring to the independent claims 1,10 and 1 9, Ogawa teaches that 
upon receipt of an input/output request from a user in a kernel space, an 
input/output request acceptance unit accepts the input/output request from the 
user process. An input/output request processing thread generation unit 
generates a thread for processing the input/output request accepted by the 
input/output request acceptance unit as a plurality of divided threads (see column 
2, line 65 through column 3 lines 1-5). 

7. Referring to the instant claims the limitation "receiving a request to 
provide a service from a user" is met by receipt of an input/output request from a 
user in a kernel space (see column 2, line 65 and Fig. 1). Ogawa shows that 
request is sent form the user space (40) to kernel (50) - see Fig. 2. The limitation 
"determining if the request was transmitted from a user space ... of the computer 
system" is met by request acceptance process depicted in Figs. 5A and 5B. 
Referring to the independent claim 19, Ogawa shows a processor and a memory 
unit coupled by the bus system (see Fig. 20). Ogawa teaches that requests are 
analyzed and are not serviced if they do not match the request list (see Fig. 5 
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and Fig.9). Ogawa, however does not explicitly teach determining if the request 
from unauthenticated user fails to satisfy the security requirement. Referring to 
the instant claims Willman discloses a method and system for avoiding selector 
loads (see abstract and Fig. 5). Willman shows kernel Address space and 
Application (i.e. user) address space. Willman teaches that user requests are 
not processed if the request of r the application program comes form the wrong 
address space. The application program is allocated the address space from 0 to 
2 G bytes. The kernel is allocated the address space from 2 G bytes to 4 G 
bytes. When a task is started its segment descriptor table contains a code 
segment entry, a data segment entry, and, optionally, a thread environment block 
(TEB) entry. The code segment entry defines the user code segment with a 
segment base address of 0, a segment limit of 4 G bytes, and an attribute of 
execute. The data segment entry defines the user data segment with a segment 
base address of 0, a segment limit of 4 G bytes, and an attribute of read/write. 
The TEB segment, for example, has a segment base address of 1 28K and a 
segment limit of 64K bytes and an attribute of read and write. Willman shows the 
use of security attributes for the user space. Therefore, at the time the invention 
was made it would have been obvious to one of ordinary skill in the art to modify 
the information processing apparatus of Ogawa by adding the functionality to 
determine if the request meets the security requirements as taught in Willman. 
One of ordinary skill in the art would have been motivated to modify the 
information processing apparatus servicing request received from the user kernel 
by adding the functionality to determine if the request meets the security 
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requirements as taught in Willman for generating the exception an the interrupt of 
the execution of the user instructions (see Willman abstract and Fig. 7). 

8. Referring to claims, 2, 1 1 and 20, Willman teaches that request is services 
if the requirements are met (see Fig. 6). 

9. Referring to claims 3, 12,21, one of ordinary skill in the art would have 
been motivated to determine if the request comes from the manager in the kernel 
space configured for secured connection, for not having to analyze the request 
prior to servicing it. 

1 0. Dependent claims 4-9, 1 3-1 8 and 22-27 all recite servicing or not servicing 
the request based one the fact that request either meets or does not meet the 
security requirements. These claims are rejected on the same grounds as 
independent claims 1,10 and 1 9. 

Conclusion 

Any inquiry concerning this communication or earlier communications from 
the examiner should be directed to Grigory Gurshman whose telephone number 
is (571 )272-3803. The examiner can normally be reached on 9 AM-5:30 PM. 

If attempts to reach the examiner by telephone are unsuccessful, the 
examiner's supervisor, Gilberto Barron can be reached on (571)272-3799. The 
fax phone number for the organization where this application or proceeding is 
assigned is 703-872-9306. 
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Information regarding the status of an application may be obtained from 
the Patent Application Information Retrieval (PAIR) system. Status information 
for published applications may be obtained from either Private PAIR or Public 
PAIR. Status information for unpublished applications is available through 
Private PAIR only. For more information about the PAIR system, see http://pair- 
direct.uspto.gov. Should you have questions on access to the Private PAIR 
system, contact the Electronic Business Center (EBC) at 866-217-9197 (toll- 
free). 
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